CVE Daily

CVE-2011-2683

reseed seeds random numbers from an insecure HTTP request to random.org during i...

Medium CVSS 5.9

Overview

reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack.

CWE: CWE-254 Published: 2017-10-23T18:29:00.210
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.9 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags